🛡️ Security

Channel Binding Token

A fingerprint of a TLS session attached to an authentication token so the server can confirm the token arrived over the same channel it was issued on. It is the mechanism Extended Protection uses to stop relay.

📚 Deep Dive

Learn Article

How to Enable Extended Protection for Authentication on Exchange

Extended Protection for Authentication is the control that stops NTLM relay against Windows services. Here is what it does and how to turn it on across Exchange virtual directories.

intermediate 3 min read

Back to Glossary